From Seoul to Tokyo : Threats for Japan and South Korea

No ratings

Presented at CODEBLUE2018@TOKYO 2018 by

Minseok Heo

Korea and Japan are geographically close. However, as similar as their cultures and languages may be, they have their differences. Also, both of these countries have a unique aspect different from all other countries. Both countries have a domestic word processor so they operate in a different context in the IT field than many other countries. It is the same in the security field. There is a clear difference between the malware codes used to attack the country. Nonetheless, there are still malware that target both countries, such as Icefog, Bisonal and Xxmm. And sometimes groups which made APT attacks and stole internet banking information extended their attack to Japan. So it is important for Japan to be on the alert about the attacks in Korea and vice versa. In this presentation, I will cover the attack target, attack methods, and the characteristic of the code of the attack group targeting South Korea and Japan. I will also summarize the types and characteristics of malware reported in Japan by AhnLab's customers and will compare it with malware in Korea. I will go through the attack groups and their methods of attacking Korean companies and institutions and who have a potential to attack Japan. Hopefully, this will be a good foundation to help prepare against potential attacks in Japan. Both countries need cooperation to prepare for cyberattacks.